Skip to content

fix(trigger-api,service-automation): refuse an api flow with no per-flow secret, at arm time and at registration (#20529) #29064

fix(trigger-api,service-automation): refuse an api flow with no per-flow secret, at arm time and at registration (#20529)

fix(trigger-api,service-automation): refuse an api flow with no per-flow secret, at arm time and at registration (#20529) #29064

Triggered via pull request September 29, 2026 02:14
Status Success
Total duration 1m 5s
Artifacts –

pr-automation.yml

on: pull_request
Check PR Size
17s
Check PR Size
Check Changeset
1m 1s
Check Changeset
Auto Label
13s
Auto Label
Fit to window
Zoom out
Zoom in

Annotations

4 notices
Check PR Size
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Auto Label
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Check Changeset: .changeset/20529-api-trigger-requires-secret.md#L0
ADR-0087 exemption (no-migration-prescription): Nothing authorable changes spelling or type: `packages/spec` is untouched, the start node's `config` stays the open record it was, and `hookId` and `secret` are read from it exactly as before. What changes is runtime behaviour for one authored shape, an `api`-kind flow whose start node carries no `config.secret`, which is now refused at registration and at arm time. `objectstack migrate meta` could not rewrite that shape even in principle, because the missing value is a shared secret only the author and the sending system can supply. The other categories are closed on facts: both packages publish (not `unpublished`); no ADR-0087 id covers this shape and none is minted here (not `registered` / `already-registered`); and the change is runtime behaviour, not a TypeScript declaration (not `runtime-interface-only` / `type-surface-only`).
Check Changeset
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"